chore(ci): Fix codecov coverage collection within CI jobs (#9559)

* chore(ci): Fix codecov coverage collection within CI jobs

* fix codecov to git paths

* fix codecov flags

* another try

* another try

* remove debug

* another try

* Potential fix for code scanning alert no. 416: Workflow does not contain permissions

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

* fix

* fix

* another fix

---------

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

Author: KSDaemon

.github/actions/codecov-fix.sh

@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+repo_root="$(cd "$(dirname "${BASH_SOURCE[0]}")/../../" && pwd)"
+
+for path in "$repo_root"/packages/*/coverage/lcov.info; do
+  [ -f "$path" ] || continue
+
+  pkg_dir="$(dirname "$path")"          # packages/foo/coverage
+  pkg_root="$(dirname "$pkg_dir")"      # packages/foo
+  tmp_path="$pkg_dir/lcov.fixed.info"
+
+  sed "s|SF:src/|SF:packages/$(basename "$pkg_root")/src/|g" "$path" > "$tmp_path"
+done

.github/workflows/push.yml

@@ -120,15 +120,21 @@ jobs:
         run: yarn build
       - name: Lerna test
         run: yarn lerna run --concurrency 1 --stream --no-prefix unit
-      - name: Upload coverage reports to Codecov
-        uses: codecov/codecov-action@v5
+      - name: Fix lcov paths
         if: (matrix.node-version == '22.x' && matrix.transpile-worker-threads == true)
+        run: |
+          ./.github/actions/codecov-fix.sh
+      - name: Combine all fixed LCOV files
+        if: (matrix.node-version == '22.x' && matrix.transpile-worker-threads == true)
+        run: |
+          echo "" > ./combined-unit.lcov
+          find ./packages -type f -name lcov.fixed.info -exec cat {} + >> ./combined-unit.lcov || true
+      - name: Upload coverage artifact
+        if: (matrix.node-version == '22.x' && matrix.transpile-worker-threads == true)
+        uses: actions/upload-artifact@v4
         with:
-          token: ${{ secrets.CODECOV_TOKEN }}
-          files: ./packages/*/coverage/*
-          verbose: true
-          flags: cube-backend
-          fail_ci_if_error: false
+          name: coverage-unit
+          path: ./combined-unit.lcov
 
   lint:
     runs-on: ubuntu-24.04
@@ -496,15 +502,18 @@ jobs:
           # Snowflake
           DRIVERS_TESTS_SNOWFLAKE_CUBEJS_DB_USER: ${{ secrets.DRIVERS_TESTS_CUBEJS_DB_SNOWFLAKE_USER }}
           DRIVERS_TESTS_SNOWFLAKE_CUBEJS_DB_PASS: ${{ secrets.DRIVERS_TESTS_CUBEJS_DB_SNOWFLAKE_PASS }}
-      - name: Upload coverage reports to Codecov
-        uses: codecov/codecov-action@v5
-        if: (matrix.node-version == '22.x')
-        with:
-          token: ${{ secrets.CODECOV_TOKEN }}
-          files: ./packages/*/coverage/*
-          verbose: true
-          flags: cube-backend
-          fail_ci_if_error: false
+      - name: Fix lcov paths
+        run: |
+          ./.github/actions/codecov-fix.sh
+      - name: Combine all fixed LCOV files
+        run: |
+          echo "" > ./combined-integration-${{ matrix.db }}.lcov
+          find ./packages -type f -name lcov.fixed.info -exec cat {} + >> ./combined-integration-${{ matrix.db }}.lcov || true
+      - name: Upload coverage artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: coverage-integration-${{ matrix.db }}
+          path: ./combined-integration-${{ matrix.db }}.lcov
 
   integration-smoke:
     needs: [latest-tag-sha, build-cubestore, build-native-linux]
@@ -787,3 +796,29 @@ jobs:
         with:
           name: cypress-screenshots-docker-dev-${{ matrix.name }}
           path: packages/cubejs-testing/cypress/screenshots
+
+  upload-coverage:
+    name: Upload merged coverage to Codecov
+    needs: [unit, integration]
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      actions: read
+    steps:
+      - name: Install Codecov CLI
+        run: |
+          curl -Os https://uploader.codecov.io/latest/linux/codecov
+          chmod +x codecov
+      - name: Download all coverage artifacts
+        uses: actions/download-artifact@v4
+        with:
+          path: all-coverage
+      - name: Merge all coverage files
+        run: |
+          find all-coverage -name '*.lcov' -exec cat {} + > merged-coverage.info
+      - name: Upload merged coverage to Codecov
+        run: |
+          ./codecov --token "${{ secrets.CODECOV_TOKEN }}" \
+              --file ./merged-coverage.info \
+              --flags cube-backend \
+              --name "cube backend coverage"

codecov.yml

@@ -10,3 +10,6 @@ coverage:
     patch:
       default:
         informational: true
+
+github_checks:
+  annotations: false